May 2002 - openSUSE Security - openSUSE Mailing Lists

Re: [suse-security] SUSE 8.0: IS Harden-SuSE supported ??
by Martin Peikert 02 May '02

02 May '02

Julian Wingert wrote: > Hallo > > if you need "harden-suse" to make your server secure, > better not put it in the wild. Hahaha. Usually I run debian and OpenBSD... Can you tell me what the harden-suse script is good for if it's not to secure a server running in the wild? GTi

1 0

Re: [suse-security] SUSE 8.0: IS Harden-SuSE supported ??
by Johan Stäring 02 May '02

02 May '02

[Right... one needs to post from and to the correct address. Sorry about that, Gunther and Marc] On Thu, 2 May 2002, Gunther Stammwitz wrote: :can I use harden_suse with SuSE-8.0 ?? :I'm askin because the latest version of Harden SuSE is v3.5 from the 12th :June 2001. :This is definitive BEFORE SuSE 8.0 has been released. Why not try instead of ask? :) Change the line $debug = 0 to $debug = 1 in the harden_suse script and execute it. Look for error messages and look through the output files that in debug mode ends up in a directory named something similar to /tmp/.harden_suse.<pid> If nothing seems to break, the script works. /Johan, without a SuSE 8.0-machine to try on -- ================================================================ || js(a)fy.chalmers.se || Johan Stäring || +46-(0)70-672 79 01 || || ICQ#: 7290407 || http://www.fy.chalmers.se/~js || ================================================================

2 1

SUSE 8.0: IS Harden-SuSE supported ??
by Gunther Stammwitz 02 May '02

02 May '02

Hello, can I use harden_suse with SuSE-8.0 ?? I'm askin because the latest version of Harden SuSE is v3.5 from the 12th June 2001. This is definitive BEFORE SuSE 8.0 has been released. Thanks, Gunther + Serverhousing @ www.rackbase.de + --------------------------------------------------------- Mainlab GmbH Sachsenhäuser Landwehrweg 236 60598 Frankfurt am Main Tel. / Fax: 0700-2MAINLAB (0700-26246522) Email: info(a)mainlab.de Web: www.mainlab.de

1 0

Strange system log entries Can anyone explain and help get rid off
by Ralph F. De Witt 02 May '02

02 May '02

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi all: I have noticed after doing my SuSE 8.0 install these strange log entires about eth0 can anyone explain them and how to correct what ever is not working right. Just for background I did a clean install of 8.0 pro. I connect to the internet through a cable modem connected to eth0. During setup I did not specifie any addresses except for dns servers and the default 255.x.x.x stuff, I checked DHCP. This is a snip of the system log file: May 2 01:19:12 Unkitty kernel: SuSE-FW-UNAUTHORIZED-TARGET IN=eth0 OUT= MAC=01:00:5e:00:00:01:00:04:bd:c1:18:0f:08:00 SRC=192.168.100.1 DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2 May 2 01:22:12 Unkitty kernel: SuSE-FW-UNAUTHORIZED-TARGET IN=eth0 OUT= MAC=01:00:5e:00:00:01:00:04:bd:c1:18:0f:08:00 SRC=192.168.100.1 DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2 May 2 01:25:12 Unkitty kernel: SuSE-FW-UNAUTHORIZED-TARGET IN=eth0 OUT= MAC=01:00:5e:00:00:01:00:04:bd:c1:18:0f:08:00 SRC=192.168.100.1 DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2 May 2 01:25:47 Unkitty su: (to root) ralph on /dev/pts/2 May 2 01:25:47 Unkitty su: pam_unix2: session started for user root, service su May 2 01:25:47 Unkitty su: pam_unix2: session finished for user root, service su May 2 01:25:47 Unkitty su: (to root) ralph on /dev/pts/2 May 2 01:25:47 Unkitty su: pam_unix2: session started for user root, service su May 2 01:28:12 Unkitty kernel: SuSE-FW-UNAUTHORIZED-TARGET IN=eth0 OUT= MAC=01:00:5e:00:00:01:00:04:bd:c1:18:0f:08:00 SRC=192.168.100.1 DST=224.0.0.1 LEN=28 TOS=0x00 PREC=0xC0 TTL=1 ID=0 PROTO=2 Thanks for your help. - -- Yours, Ralph. It said Use Windows XP or better, so I installed SuSE 8.0 Professional Register Linux User 168814 ICQ #49993234 AIM ralphdewitt GPG Public Key available at http://www.keyserver.net Key fingerprint = 6426 1CFF 0987 9D51 76D6 06BC F22A CFF4 559A 03E7 Kernel version 2.4.18-4GB Current Linux uptime: 2 days 2 hours 22 minutes. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE80Psy8irP9FWaA+cRAvjgAJ0V6w+woqGeHJBDomtPzrUEGPFAWgCfdYwF BwZ20neYoxBdtd7Ylq8E2CI= =Ic/v -----END PGP SIGNATURE-----

1 0

RE: [suse-security] Installing a Firewall on the same system runi ng HTTP, Mail, DNS, ..
by Peer Stefan 02 May '02

02 May '02

Hi > From: Reckhard, Tobias [mailto:tobias.reckhard@secunet.com] > > > Is there some security feature, if we ran a firewall on the > > same server, > > which is running other services like HTTP, .. > > Personally, I'd suggest to get a firewall running on a > > specific server, and > > all other services on other systems. I totally agree with your personal opinion. > The main problem with using a firewall to perform other > services is that > vulnerabilities in those services can have disastrous > effects, typically > much graver ones than if merely a server is compromised. Another thing are users. For larger environments you will have a webteam, which requires several user-accounts on the webserver. You will have ftp enabled, because standard web-design tools like dreamweaver or frontpage allow you to update entire webpages via ftp. Or even worse - you'll have to enable the frontpage extensions - all those services add some new holes to your system. regards, Stefan

1 0

RE: [suse-security] Installing a Firewall on the same system runi ng HTTP, Mail, DNS, ..
by Reckhard, Tobias 02 May '02

02 May '02

> Is there some security feature, if we ran a firewall on the > same server, > which is running other services like HTTP, .. > Personally, I'd suggest to get a firewall running on a > specific server, and > all other services on other systems. The main problem with using a firewall to perform other services is that vulnerabilities in those services can have disastrous effects, typically much graver ones than if merely a server is compromised. Tobias

1 0

Installing a Firewall on the same system runing HTTP, Mail, DNS, ..
by Pascal Miquet 02 May '02

02 May '02

Hi, Just to clarify what I think about Security. Is there some security feature, if we ran a firewall on the same server, which is running other services like HTTP, .. Personally, I'd suggest to get a firewall running on a specific server, and all other services on other systems. Regardless SPOF, of course. Thanks for any advice. Pascal Miquet

1 0

emailing problems - possible spoofing ?
by Matt 01 May '02

01 May '02

Hi, Is it posible to spoof an email address ? Could someone test test(a)jtml.com and find out where it is going too ? Regards Matt

2 1

Re: [Users] IPSEC and SuSEFirewall2 v2.1
by Robert Klein 01 May '02

01 May '02

> I have modified the SuSEfirewall2 Script (Version 2.1) for better > support of FreeSWAN/IPSEC. Nice idea. > Any comments/suggestions/feedback? Two questions: Is it possible to use more than one IPSEC device? E.g. FW_DEV_IPSEC="ipsec0 ipsec1" and: Can I use more than one remote network? E.g. FW_IPSEC_REMOTENET="192.168.3.0/24 192.168.4.0/24" Robert

3 2